blob: a42c06ab229db52049a5042a2073b5c9d53cbd89 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
|
# _____
# |_ _| __ _____ _____
# | || '__/ _ \ \ / / _ \
# | || | | (_) \ V / __/
# |_||_| \___/ \_/ \___|
#
# Copyright 2012,2013 Codethink Limited
#
# Rules for any repository not under ##PREFIX##
# This is, by default, /baserock/ and /delta/
# There are two classes of accessors here. Lorry and Others
allow "Anyone may read here" op_read
allow "Anyone may write here" op_write
# Lorry can do anything reffy which is not inside the local refs
allow "Lorry may touch everything but refs/heads/##PREFIX##" op_is_reffy is_lorry !is_local_ref
# Noone can rewind/rebase outside of their personal refs
deny "Non-personal branches may not be rewound/rebased" op_forcedupdate !is_lorry !ref_is_personal
# Everyone else can do reffy things inside refs/heads/##PREFIX##
allow "Project writers may alter any refs" op_is_reffy !is_lorry is_local_ref
|